registartion-usdai[.]com
“$CHIP Portal | USD AI”
registartion-usdai.com — Contenuto non disponibile (HTTP 502). Tipo di truffa: Generic Phishing. Riepilogo delle prove: VirusTotal 1/91; URLQuery 1 alert; 2 external blocklist matches (MetaMask, SEAL); PhishDestroy score 66/100. Registrar: CNOBIN INFORMATION TEC….
L’analisi dettagliata di PhishDestroy AI resta in inglese per preservare il rapporto forense originale.
registartion-usdai.com mimics a legitimate $CHIP Portal for USD AI, creating a convincing trap for visitors expecting a genuine cryptocurrency or financial service interface. This domain poses as an official portal but is designed to harvest sensitive credentials or inject malware under the guise of a $CHIP-related platform. The page title intentionally mirrors that of a real service to deceive users into lowering their guard, making it a high-risk imitation rather than a random phishing attempt. This domain was flagged by PhishDestroy during routine threat monitoring. Key indicators include 0 detections on VirusTotal as of submission, a creation date of April 26, 2026, and registration through CNOBIN INFORMATION TECHNOLOGY LIMITED. The domain resolves to IP address 188.114.97.3 and uses a Let’s Encrypt SSL certificate, which further lends an air of legitimacy to the fraudulent site. Despite its recent registration, the domain has already been associated with active phishing activity targeting users interested in USD AI or $CHIP transactions. If you visited registartion-usdai.com, immediately cease any interaction with the page. Do not enter credentials, download files, or click on any links. Clear your browser cache and run a full malware scan using reputable antivirus software. If you provided login details, change passwords on all accounts using the same credentials and enable two-factor authentication. Report the incident to your IT security team or relevant platform support. Monitor financial accounts closely for unauthorized activity.
Informazioni sulla sicurezza di rete
| Detection System | Indicator | Verdict | Alert |
|---|---|---|---|
| DNS4EU | registartion-usdai.com |
malicious | Sinkholed |
Pipeline di risposta alle minacce
Stato della lista di blocco pubblica
Acquisizione salvata
Analisi dei domini
Dettagli tecniciDNS, SAN SSL, timestamp
ICANN OVERSIGHT
Accreditamento e contesto RAA
Accreditamento e contesto RAA
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
Tecnologie · 4 identified
jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.
jquery.com Confidenza al 100%Google Hosted Libraries is a stable, reliable, high-speed, globally available content distribution network for the most popular, open-source JavaScript libraries.
developers.google.com Confidenza al 100%Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.
www.cloudflare.com Confidenza al 100%HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.
httpwg.org Confidenza al 100%Analisi di VirusTotal
Dati e relazioni esterne
PD-20260428-56BEC9 Recipient: abuse@ordertld.com Questo sito ti ha influenzato in qualche modo?
Se hai inserito credenziali dell'account, informazioni personali o di pagamento oppure hai scaricato un file da questo dominio, agisci immediatamente. Di seguito sono riportate le risorse per aiutarti a segnalare l'incidente e proteggerti.
Segnalalo alle autorità locali
Seleziona il tuo Paese per ottenere contatti ufficiali del crimine informatico o creare una bozza di reclamo →.
Verifica qualsiasi dominio
Analisi delle minacce utilizzando blocklist archiviate, WHOIS, DNS e prove di scansione pubblica
Scansiona oraSegnala un tentativo di phishing
Segnala i domini sospetti al nostro database delle minacce — proteggi la comunità
SegnalaFeed in tempo reale sulle minacce
Segnalazioni recenti di phishing e modifiche osservate della disponibilità
MonitoraRimani informato, rimani al sicuro
Controlla le minacce in tempo reale oppure contesta questa segnalazione se ritieni che si tratti di un falso positivo